TTushar OpeniamSep 10 · 7 min readThe Access Review Your Auditor Cannot Rely OnThe quarterly access certification campaign closed on schedule. Every item on the list received a decision. The completion rate was 100%. The records are filed. Then the auditor asks a follow-up questopeniam.hashnode.dev
MMirna De Jesus CamberoSep 1 · 5 min readThree Cloud Access-Control Limits That Might Surprise You When Migrating Services at ScaleThe principle of least privilege is an access-control approach in which a user or service receives only the permissions needed to perform its job. For example, a service that reads files from a specifcodelikeawoman.com
RrathsaraAug 31 · 19 min readOpenID Connect: The Identity Layer OAuth Was MissingBy the time I actually heard the word OIDC, I'd already been through OAuth and PKCE conversations I hadn't fully understood, years apart from each other, and this one arrived even later than those. Itrr-cyber.hashnode.dev
RrathsaraAug 6 · 15 min readIdentity Foundations: Everything Before OAuthBefore any protocol makes sense on its own terms, a few things underneath it need to be settled first: what authentication and authorization actually are as distinct concepts, how identity gets carrie13Nrr-cyber.hashnode.dev
RrathsaraAug 5 · 9 min readIdentity Was the Gap I Did Not Know I HadI had worked across cloud security engineering, vulnerability assessment, penetration testing, and application security. I had reviewed IAM configurations across multiple cloud platforms, flagged over31Nrr-cyber.hashnode.dev
YYogeshwar PeelaJul 18 · 4 min readFAM CTF : The Vault Door WriteupSummary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trustsexploitnotes.hashnode.dev
MManuela SchrittwieserJul 16 · 7 min readIdentity & Trust: The Foundation of Secure AI SystemsNeuralStack | MS — AI Security Every security control eventually reduces to two questions: who is acting, and how much should they be believed. Access control answers the first question. Trust calibraneuralstackms.tech
RRJ AbellJun 30 · 8 min readAttack Surface Management in the Quantum EraIn cybersecurity, people often talk about advanced threat actors, dangerous viruses, new software weaknesses, and the future risks of quantum computers. But in reality, most security breaches happen bricocyberstack.hashnode.dev
TTech Skill SchoolJun 17 · 8 min readTop 15 Cybersecurity Skills Companies Are Hiring For in 2026Cybersecurity skills 2026, top cybersecurity skills, and in-demand cybersecurity skills continue to dominate hiring conversations as organizations battle escalating threats in an increasingly digital techskillschool.hashnode.dev
OOnela zandile MtyoboApr 22 · 2 min readInfrastructure Leadership Through Governance, Compliance, and Automation Thinking.This is where I stand as an emerging Infrastructure Leader My journey into infrastructure leadership is shaped by an unconventional foundation — Criminal Justice ⚖️. At first glance, it may seem unrelsystemsandscale.hashnode.dev